Security Database Modification History | Q-Logic 5602 guide

9 – Device Security Configuration Displaying Security Database Information

S

9.1.5

Security Database Modification History

Enter the Security History command to display a record of security database modifications as shown in the following example:

SANbox #> security history
Active Database Information
---------------------------
SecuritySetLastActivated/DeactivatedBy		Remote
SecuritySetLastActivated/DeactivatedOn		day month date time year
Database Checksum	00000000
Inactive Database Information
-----------------------------
ConfigurationLastEditedBy	admin@IB-session11
ConfigurationLastEditedOn	day month date time year
Database Checksum	00007558

History information includes the following:

Time of the most recent security set activation or deactivation and the user account that performed it

Time of the most recent modifications to the security database and the user account that made them

Checksum for the security database

9.1.6

Security Database Limits

Enter the Security Limits command to display a summary of the objects in the security database and their maximum limit as shown in the following example:

SANbox #> security limits
Security Attribute	Maximum	Current	[Name]
------------------	-------	-------	------
MaxSecuritySets	4	1
MaxGroups	16	2
MaxTotalMembers	1000	19
MaxMembersPerGroup	1000	4	group1
		4	group1
		15	group2

9-6	59183-01 A

Image 104

Q-Logic 5602 manual Security Database Modification History, Security Database Limits

Contents

Firmware Version Document Revision History Table of Contents Section Port Configuration Section Zoning Configuration Connection Security Configuration Section Device Security ConfigurationRadius Server Configuration Add Members to an Alias Remove Members from an Alias Event Log Configuration Simple Network Management Protocol ConfigurationCommand Reference Section 59183-01 a Index List of Tables Introduction Related Materials Switch Models and ExamplesIntended Audience New in This Release Training Technical SupportAvailability Contact Information Support Headquarters Introduction Technical Support 59183-01 a Command Line Interface Usage This section describes the following tasks Logging In to the Switch To log off, enter the Exit command Command-Line Completion Opening and Closing an Admin SessionEntering Commands Setting Page Breaks Getting Help Creating a Support File Local directory now /itasca/conf/images bin Ftp Downloading and Uploading Files Userimages password images User Account Configuration Factory User Accounts Displaying User Account Information Creating User Accounts Modifying User Accounts and Passwords Following example deletes the user account named user3 Network and Fabric Configuration Displaying Name Server Information Displaying the Ethernet Network Configuration WWN Configuring the Ethernet Port Following is an example of a connection failure Verifying a Switch in the NetworkVerifying and Tracing Fibre Channel Connections Port Displaying Switch Information Switch configuration consists of the following tasks Switch Operational Information System Process Information PID Ppid CPU Time Elapsed Time Between Resets Configuration Information Switch Configuration Parameters Zoning Configuration Parameters Security Configuration Parameters Hardware Information Heartbeat LED Activity Firmware Information Managing Switch Services Please Note Activate a Switch Configuration Managing Switch ConfigurationsDisplay a List of Switch Configurations Modify a Switch Configuration Copy a Switch ConfigurationDelete a Switch Configuration Decimal value, 100-100000 msec Back Up and Restore a Switch Configuration Creating the Backup File Downloading the Configuration File Restoring the Configuration File Ftp ipaddress user images password images ftp bin Paging a Switch Setting the Date and Time Switch Configuration Setting the Date and Time List Switch Reset Methods Resetting a SwitchInstalling Firmware One-Step Firmware Installation Nondisruptive Activation Enter the password for your account name FTP only Custom Firmware Installation Wait for the unpack to complete Managing Switch Feature Upgrades Display Feature Licenses Install a Feature License Key Page You can display the following port information Displaying Port InformationThis section describes the following topics Port Configuration Parameters Arbff Port Operational Information PL-XPL-VC-SG3-22 Port Threshold Alarm Configuration Parameters Port Performance Transceiver Information FTRJ8524P2BNL Modifying Port Operating Characteristics Set config port Port Binding Resetting a Port SANbox admin-config # set config security port Configuring Port Threshold Alarms SANbox admin-config # set config threshold Testing a Port Online Tests for Ports Offline Tests for Ports Cancel a Port Test Display Port Test Results Extending Port Transmission Distance Current value SANbox # show donor Port Config Zoning Configuration Configured Zone Set Information Displaying Zoning Database Information SANbox # zoning list Active ZoneSet Information Active Zone Set Information Zone Set Membership Information Zone Membership Information Alias and Alias Membership Information Zoning Modification History Zoning Database Limits E2JBOD2 Configuring the Zoning Database SANbox # admin start SANbox admin # config edit Modifying the Zoning Database Resetting the Zoning Database Removing Inactive Zone Sets, Zones, and Aliases Managing Zone Sets Create a Zone SetDelete a Zone Set Managing Zone Sets consists of the following tasks Rename a Zone Set Copy a Zone SetAdd Zones to a Zone Set Remove Zones from a Zone Set Deactivate a Zone Set Managing ZonesCreate a Zone Delete a Zone Rename a Zone Copy a ZoneAdd Members to a Zone Remove Members from a Zone Managing Aliases Create an AliasDelete an Alias Rename an Alias Remove Members from an Alias Copy an AliasAdd Members to an Alias Connection Security Configuration Managing SSL and SSH Services TelnetEnabled True / False SSHEnabled Displaying SSL and SSH Services Creating an SSL Security CertificatePage Device Security Configuration Configured Security Set Information Displaying Security Database Information MD5 Active Security Set Information Security Set Membership Information Group Membership Information Security Database Modification History Security Database Limits Configuring the Security Database Set Config Security command Before Reaching the end of the list Resetting the Security Database Modifying the Security Database Managing Security Sets Create a Security SetDelete a Security Set Rename a Security Set Add Groups to a Security Set Remove Groups from a Security SetActivate a Security Set Deactivate a Security Set Managing Groups Create a GroupDelete a Group Rename a Group Copy a Group Add Members to a Group Modify a Group Member Remove Members from a Group Radius Server Configuration Displaying Radius Server Information Configuring a Radius Server on the Switch Page Event Log Configuration Starting and Stopping Event Logging Displaying the Event Log Filtering the Event Log Display Controlling Messages in the Output Stream Managing the Event Log Configuration Configure the Event Log Clearing the Event Log Display the Event Log ConfigurationRestore the Event Log Configuration Logging to a Remote Host Creating and Downloading a Log File Page Managing the Snmp Service You control the Snmp service SNMPEnabled parameters through 12-2 59183-01 a Displaying Snmp Information Modifying the Snmp Configuration Resetting the Snmp Configuration SANbox admin # reset snmpPage Command Reference Access Authority Command Syntax and Keywords Command Listing Commands are listed in alphabetical order as follows Admin AuthoritySyntax Keywords Alias Syntax aliasKeywords add alias memberlist Copy aliassource aliasdestination Delete alias ListMembers alias Remove alias memberlist Keywords activate configname ConfigSyntax config Save configname Edit confignameRestore 59183-01 a 13-9 Support CreateKeywords certificate 59183-01 a 13-11 Following is an example of the Create Certificate command SANbox admin # create support Keywords MMDDhhmmCCYY DateSyntax date Closes the Telnet session ExitAuthority None Syntax exit Keywords address FcpingAuthority None Hopcount FctracePortdestination Examples The following is an example of the Fctrace command Feature Syntax featureAdd licensekey log Keywords add licensekey Following is an example of the Feature Log command Firmware Install Syntax firmware install 59183-01 a 13-21 Group Syntax group Keywords add group ISL Group Member Attributes Port Group Member Attributes Configures security for attachments to other switches MS Group Member AttributesCopy groupsource groupdestination Create group type Edit group member Group Member Attributes Members group Remove group memberlistRename groupold groupnew Securitysets group Following is an example of the Group Edit command Following is an example of the Group List command Following is an example of the Group Members command Hardreset Syntax hardreset Help command keyword CommandHelp Keyword Re-execute selected commands Following is an example of the History commandHistory History Hotreset Hotreset Syntax image Keywords cleanupImage Unpack file 13-36 59183-01 a Following is an example of the Lip command LipReinitializes the specified loop port Lip portnumber Logout Authority None Syntax logout Passwd Syntax passwd accountname Keywords accountname Ipaddress PingPing ipaddress Displays current system process information Examples The following is an example of the Ps commandAuthority None Syntax ps Quit Authority None Syntax quit Keywords config configname ResetSyntax reset Services FactoryPort portlist Radius Switch Workstation could lose communication with the switchSystem Zoning Switch Configuration Defaults Values Port Configuration Defaults Parameter 4-Gbps Port Defaults Port Threshold Alarm Configuration Defaults Zoning Configuration Defaults Snmp Configuration Defaults 10. Radius Configuration Defaults 11. Services Configuration Defaults 12. System Configuration Defaults 13. Security Configuration Defaults Clear SecurityKeywords active Save EditLimits Following is an example of the Security History command Following is an example of the Security Limits command Following is an example of the Security List command Securityset Syntax securitysetKeywords activate securityset Active Copy securitysetsource securitysetdestination Create securitysetDeactivate Delete securityset Following is an example of the Securityset Groups command Following is an example of the Securityset List command Set Alarm Syntax set alarm optionKeywords option Option can be one of the following State Set BeaconSet beacon state Set Config Port 14. Port Configuration ParametersKeywords port portnumber Ports portnumber Send Arbff True instead of IDLEs False on the loop 14. Port Configuration Parameters 14. Port Configuration Parameters 59183-01 a 13-65 13-66 59183-01 a 15. Security Configuration Parameters Set Config SecuritySyntax set config security 13-68 59183-01 a Set Config Security Portbinding 16. Port Binding Configuration Parameters 17. Switch Configuration Parameters Set Config SwitchSyntax set config switch Resource Allocation Timeout Value. The number of millisec 18. Port Alarm Threshold Parameters Set Config ThresholdSyntax set config threshold Error rate has fallen below the falling trigger Following is an example of the Set Config Threshold command 19. Zoning Configuration Parameters Set Config ZoningSyntax set config zoning 59183-01 a 13-75 Set Log Set logArchive Component filterlist Display filter Disables monitoring on all ports Level filterMonitors none of the severity levels Specifies all ports Alarms are always logged and always displayed on the screen StartStop Stops logging of events Syntax pagebreak state Set PagebreakKeywords state 59183-01 a 13-81 Enable Set PortSet port clear Set port portnumber Speed transmissionspeed State state Set Setup Radius Configures Radius servers on the switchSet setup radius Configuration fields 20. Radius Service Settings 13-86 59183-01 a Set Setup Services Configures services on the switchSyntax set setup services 21. Switch Services Settings 21. Switch Services Settings 59183-01 a 13-89 Set Setup Snmp Configures Snmp on the switchSyntax set setup snmp 22. Snmp Configuration Settings 22. Snmp Configuration Settings 13-92 59183-01 a 23. System Configuration Settings Set Setup SystemSyntax set setup system 13-94 59183-01 a Set Switch State Admin sessionSet switch state state State can be one of the following Set Timezone Set timezone Show about Show AboutAuthority None Syntax Show Alarm Show alarmSettings Following is an example of the Show Alarm command Show Broadcast Syntax show broadcast Show chassis Displays chassis component status and temperatureShow Chassis Show Config Port Displays configuration parameters for one or more portsShow config port portnumber Portnumber 13-102 59183-01 a Syntax show config security Show Config SecurityDisplays the security database configuration parameters Show Config Security Portbinding Show config security portbinding portnumber Syntax show config switch Show Config SwitchDisplays the switch configuration parameters Syntax show config threshold Show Config ThresholdDisplays alarm threshold parameters for the switch Syntax show config zoning Show Config ZoningDisplays zoning configuration parameters for the switch Show Domains Syntax show domains Show Donor Show donor Show Fabric Show fabric Show Fdmi Show fdmi portwwnPortwwn Question marks ? Following is an example of the Show Fdmi WWN command Syntax show interface Show InterfaceDisplays the status of the active network interfaces Show Log Show logNumberofevents Component Level Options Settings Following is an example of the Show Log Level commandFollowing is an example of the Show Log Options command Port Show lsdb Show LsdbDisplays Link State database information Installed Show MediaShow media Portlist 25. Transceiver Information 13-120 59183-01 a 59183-01 a 13-121 Following is an example of the Show Mem command Show MemDisplays information about memory activity Show mem count Option Show NSShow ns option Following is an example of the Show NS portID command Syntax show pagebreak Displays the current pagebreak settingShow Pagebreak Show Perf Syntax show perf portlistKeywords portlist Byte portlist Errors portlist Outbyte portlistFrame portlist Inframe portlist Following is an example of the Show Perf Byte command 26. Show Port Parameters Show PortShow port Lipalpdalps LIPF7F7 26. Show Port Parameters 59183-01 a 13-133 Show Post Log Syntax show post log Syntax show setup mfg Show Setup MfgDisplays manufacturing information about the switch Displays Radius server information Show Setup RadiusSyntax show setup radius Syntax show setup services Show Setup ServicesDisplays switch service status information Show Setup Snmp Displays the current Snmp settingsSyntax show setup snmp Following is an example of the Show Setup Snmp command Syntax show setup system Show Setup SystemDisplays the current system settings Domainid Show SteeringShow steering domainid Show Switch Displays switch operational informationShow switch 27. Switch Operational Parameters 13-142 59183-01 a Syntax show timezone Displays the current time zone settingShow Timezone Syntax show topology Show TopologyDisplays all connected devices 59183-01 a 13-145 Show Users Show users Show Version Shutdown Syntax shutdown Port portnumber Test CancelTest cancel Test Port Syntax test port portnumberOffline loopbacktype Online 28. Port Test Parameters 13-152 59183-01 a Test Status Test status Authority None Syntax uptime Examples The following is an example of the Uptime commandUptime User Syntax userKeywords accounts Add Following is an example of the User Add command Following is an example of the User Edit command Following is an example of the User Delete command Following is an example of the User List command Authority None Syntax whoami Examples The following is an example of the Whoami commandWhoami Zone Syntax zoneKeywords add zone memberlist Copy zonesource zonedestination Delete zone Members zoneRemove zone memberlist Rename zoneold zonenew Following is an example of the Zone Members command Following is an example of the Zone Zonesets command Zoneset Syntax zoneset Delete zoneset Remove zoneset zonelistRename zonesetold zonesetnew Zones zoneset Following is an example of the Zoneset List command Following is an example of the Zoneset Zones command Delete orphans ZoningSyntax zoning Opens a Zoning Edit session 29. Zoning Database Limits 13-168 59183-01 a Following is an example of the Zoning Limits command Following is an example of the Zoning List command Index Index-2 59183-01 a Example FTP See File Transfer Protocol Index-4 59183-01 a 59183-01 a Index-5 Index-6 59183-01 a Set Config Security Port command Show Config Security Port command 59183-01 a Index-9 Index-10 59183-01 a 59183-01 a Index-11